AWS AWSCloudFormation documentation change
Summary
Updated operator compatibility documentation for insights.
Security assessment
Improves documentation for security findings filtering but doesn't mitigate any vulnerability. Describes existing security feature capabilities.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-insight-stringfilter.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-insight-stringfilter.md index 47212b958..c35732f93 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-insight-stringfilter.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-securityhub-insight-stringfilter.md @@ -83 +83 @@ For example, for the following filters, Security Hub CSPM first identifies findi -`CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2`, `GetFindingStatisticsV2`, `GetResourcesV2`, and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _AWS Security Hub CSPM User Guide_. +The `CONTAINS` operator works with automation rules V1 and V2. The `NOT_CONTAINS` operator works only with automation rules V1. The `CONTAINS_WORD` operator works only in the `GetFindingsV2`, `GetFindingStatisticsV2`, `GetResourcesV2`, and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _AWS Security Hub CSPM User Guide_.